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Cac ban c6 the tlm thay trong bai viet nay cac thuat ngCp thong dung nhat ve ITnh virc tin hoc, bao 
gom he thong, giao thipc, bao mat, lap trlnh... 

FTP 

La tCr viet tat cCia "File Transfer Protocol". Day la giao thipc truyen file tren mang dya theo chuan 
TCP, thu'ong dung de de upload file len Host, Server vol cong mac dinh la 21 

Cu phap : ftp 

Cu Phap : ping www.tentrangweb.com hoac ping diachilP -t (vd: ping 203.162.0.1 1 -t) 

Traceroute 

La chu-ong trinh cho phep ban xac dinh du-gc du-ong di cCia cac goi tin (packet) tCr may ban den 
he thong dich tren mang Internet. 

Cu phap : tracert IPhost 

Vidu : tracert 203.162.0.11 

ICMP 

La chu" viet tat cCia "Internet Control Message Protocol". Day la giao thCrc xCp ly cac thong bao 
trang thai cho IP. ICMP du'oc dung de thong bao cac loi xay ra trong qua trlnh truyen di cCia cac 
goi du" lieu tren mang. ICMP thuoc tang van chuyen (Transport Layer). 

Telnet 

La mot chu'ong trlnh terminal dau cuoi. No thu'ong dung de dang nhap vao mot may chu nao do 
tren cac daemon khac nhau cCia may chu do. Ban c6 the thu thap mot so thong tin ve may chu 
qua telnet. Ban cung c6 the check mail, goi mail va dac biet la c6 the tham gia vao cac kenh chat 
IRC cCia nu'oc ngoai. 

Cu phap : telnet RFC 

La tCp viet tat cCia "Request For Comment". Day la tap hop nhCrng tai lieu ve kiln nghi, de xuat va 
nhCrng loi blnh luan lien quan tryc tiep hoac gian tiep den cong nghe, nghi thipc mang 
INTERNET. Cac tai lieu RFC dygc chinh sCra, thay doi den khi tat ca cac ky su' thanh vien cCia 
IETF (Internet Engineering Task Force) dong y va duyet, sau do nhOng tai lieu nay du'oc xuat 
ban va du'oc cong nhan la mot chuan, nghi thipc cho Internet. 

DNS 



La tCp Viet tat cCia "Domain Name System" (He tiiong ten mien). IVIot may ciiu DNS dgi l<et noi a 
cong so 53, c6 ngiiTa la neu ban muon l<et noi vao may ciiu do, ban piiai l<et noi den cong so 53. 
IVIay ciiu ciiay DNS ciiuyen iiostname bang cac cIiCp cai tiianii cac cJiO" so tuong LPng va ngugc 
lai. 

Vi du : 127.0.0.1 -> localiiost va localliost—>127. 0.0.1 (127.0.0.1 la dia chi cCia chinh may ban 
dang dung, hay con goi la dia chi "loopback") 

SMTP 

La tCr Viet tat cCia "Simple Message Transfer Protocol". Giao thCrc SMTP dung de gCri thu" thong 
qua mot chu-ong trlnh Sendmail (Sendmail Deamon), tuy pho bien nhu-ng kem an toan. 



CGI 

La tCr Viet tat cCia "Common Gateway Interface" (Giao dien cong chung), cho phep khoi tao giao 
tiep giCra server va chu-ong trlnh nho cac dinh dang dac ta thong tin. Lap trlnh CGI cho phep viet 
chu-ong trlnh nhan lenh khoi dau tCr trang web, trang web dung dinh dang HTML de khoi tao 
chu'ong trlnh. Chu-ong trlnh CGI chay du'oi bien moi tru'ong duy nhat. Khi WWW khoi tao 
chu'ong trlnh CGI, no tao ra mot so thong tin dac biet cho chu'ong trlnh va dap Crng tro lai tCr 
chu'ong trlnh CGI. Sau do, server xac dinh loai file chu'ong trlnh can thyc thi. Noi chung, lap trlnh 
CGI la viet chu'ong trlnh nhan va truyen dCr lieu qua Internet toi WWW server. Chu'ong trlnh CGI 
SLF dung dCr lieu do va gCri dap Crng HTML tro lai may khach 

Shell 

La chu'ong trlnh giCra ngu'di dung vol nhan Linux. Moi lenh du'oc du'a ra se du'oc Shell diin dich 
roi chuyen toi nhan Linux. Noi mot each di hieu. Shell la bo diin dich ngon ngCr lenh, ngoai ra no 
con tan dung triet de cac trlnh tien ich va chu'ong trlnh Crng dung c6 tren he thong. 

NetBIOS 

La mot giao thCrc, cong nghe noi mang cCia Windows 9.x. No du'oc thiet ke trong moi tru'ong 
mang LAN de chia se tai nguyen (nhu' dung chung cac File, Folder, may in va nhieu tai nguyen 
khac...). Mo hlnh nay rat giong mo hlnh mang ngang hang 2P. Thong thu'ong mot mang dung 
giao thLFC Netbios thu'ong la Netbios Datagram Service (Port 138), Netbios Session Service (Port 
139) hoac ca hai. 

SYN 

La tCr viet tat cCia "The Synchronous Idle Character" (tam dich: Ky ty dong bo hoa). Qua trlnh 
thyc hien SYN se diin ra nhu' sau: 

Dau tien, A se gCri cho B yeu cau kit noi va cho cho B tra loi. Sau khi B nhan du'oc yeu cau nay 
se tra loi lai A la "da nhan du'oc yeu cau tCr A" (ACK) va "de nghi tra loi lai de hoan thanh kit noi" 
(SYN). Din luc nay, nlu A tra loi lai "dong y" (SYN) thl kit noi se du'oc khoi tao. 

Cookies 

La nhCrng phan dCr lieu nho c6 cau true du'oc chia se giCra website va trlnh duyet cCia ngu'di dung 
da du'oc ma hoa boi website do. Cookies du'oc lu'u trCr du'oi nhCrng file dCr lieu nho dang text (c6 
dung lu'ong du'oi 4k). Chung du'oc cac site tao ra dl lu'u trCr/truy tlm/nhan bilt cac thong tin ve 
ngu'di dung da ghe tham site va nhCrng vung ma ho di qua trong site. NhCrng thong tin nay c6 thl 
bao gom ten/dinh danh ngu'di dung, mat khau, so thich, thoi quen... 



LAN 

La tCp Viet tat cCia "Local Area Network". Mot he thong cac may tinh va thiet bj ngoai vi 6ueoc lien 
kit vol nhau. Ngipdi sir dung mang cue bo c6 the chia se du" lieu tren dTa cCrng, trong mang va 
chia se may in. 

Vulnerability 

La mot vung, diem di bi ton thu-ong trong he thong theo mot yeu cau du-gc phat hien ra, mot dac 
diem hay mot tieu chuan, hay mot vung khong du-gc bao ve trong toan bo cau true bao mat cCia 
he thong ma de lai cho he thong cac diem di bi tan cong hoac chiu anh hu-ong cac van de khac. 
Cac hacker thu-ong khai thac (exploit) vulnerability de tan cong vao he thong. 

Anonymous 

An danh, nacdanh 



La chCp Viet tat cCia "Internet Information Server". Day la mot chu'ong trlnh Webserver noi tieng 
cCia Microsoft. 

Account 

Tai khoan la slf kit hop cCia hai ylu to username (ten ngu-oi dung) va password (mat khau) do 
mot dich vu nao do da cung cap cho ban khi ban da dang ky vol ho dl bao mat cho ban. 



Source Code 

Ma nguon (cCia cCia file hay mot chu'ong trlnh nao do) 

Port: Cong 

Compile: Bien dich 

Login: Dang nhap 

Database: Co so dCr lieu 

ISP: La chu" vilt tat cCia "Internet Service Provider" (Nha cung cap dich vu Internet). 

TCP/IP: La chu" vilt tat cCia "Transmission Control Protocol and Internet Protocol". Goi tin TCP/IP 
la mot khoi du" lieu da du-gc nen, sau do kem them mot header va gCri din mot may tinh khac. 
Phan header trong mot goi tin chipa dia chi IP cCia ngu-oi gCri goi tin. 

Whois 

La mot chu'ong trlnh rat hCru ich, giup ban tlm ra nhCrng thong tin ve hosts, networks va 
administrator cCia trang web do la ai (Dia chi, Email, IP..) 



Security: Bao mat 

NAV 

La chO" Viet tat cCia ten cJiLPang trlnii "Norton Anti-Virus" cCia iiang Symantec. Day la ciiu-ong trlnii 
quet Virus rat noi tieng va piio bien. 

UDP: La cJiu" viet tat cCia "User Datagram Protocol". Co nhiem vu giong nhu" TCP, nhu-ng no 
khong dam bao slf chinh xac cCia thong tin du-gc chuyen tai. UDP chi don gian la nhCrng goi tin 
CO diem xuat phat va diem dich xac dinh 

Domain: La ten mien cCia mot website nao do 
Vi du : http://www.microsoft.com 

OS: La chu" viet tat cCia "Operation System" - He dieu hanh 

IRC: La chu" viet tat cCia "Internet Relay Chat". Day la mot chu-ong trlnh doc lap noi ma ban c6 
the tham gia vao cac kenh chat. 

mIRC: La chu-ong trlnh chat client, dyoc Khaled Mardam-Bey viet. Co the noi mIRC la phan 
mem chat dau tien roi sau do mot loat cac san pham khac cCia Yahoo, AOL (ICQ, AIM) ... moi ra 
doi. 

IPC: La chCp viet tat cCia "Inter-Process Communication". Du'oc dung trong viec chia se du" lieu 
giCra cac Crng dung va may tinh tren mang (NT/2K). Khi mot may du'oc khoi dong va log vao 
mang, hdh se tao mot chia se ngam dinh ten la IPC$. No se giup cho cac may khac c6 the nhln 
thay va kit noi den cac chia se tren may nay 

Encryption: Ma hoa 

Decryption: Giai ma 

Remote Access: Truy cap tCr xa qua mang 

GNU Debugger: La chu-ong trlnh bien dich gcc va cong cu go roi gdb 

SSI: La chu" viet tat cCia "Server Side Includes". Day la cac chi dan du'oc dat trong cac file html. 
Server se chiu trach nhiem phan tich cac chi dan nay va se chuyen kit qua cho client 

ActiveX: La mot he thong tieu chuan dung dl xay dyng cac thanh phan (component) trong moi 
tru'ong Windows. Cac thanh phan nay khong nhCrng c6 kha nang van hanh mot each doc lap ma 
con CO thi du'oc khai thac boi cac thanh phan khac. Day la nhCrng thanh phan du'oc vilt bang 
nhilu ngon ngCr khac nhau va rat da dang, c6 thI la cac ActiveX Control (dilu khiln doc lap) dl 
nhung vao chu'ong trlnh khac tCr luc thilt kl chu'ong trlnh, c6 thI la cac ActiveX DLL (thu' vien 
lien kit dong) ma cac chu'ong trlnh khac tham chilu din. 

Packet: Goi dCr lieu 

Server: May chu 

Client: May con, dung dl kit noi vol may chu (Server) 

Info: La chCr vilt tat cCia "Information", tCrc la thong tin 

Firewall: La bii'ctu'dng ICpa 



PPP: La chCp viet tat cCia "Point-to-Point". Day la mot giao thipc kit noi Internet tin cay thong qua 
Modem 

Serial Direct Cable Connection: La cong nghe kit noi may tinh bang Cable truyin nhan dCr lieu 

Ethernet: La cong nghe noi mang c6 nang Ilfc manh du-gc sCf dung hau hit trong cac mang LAN. 
Day la mang dung CSMA/CD (carrier sense media access/collision detection) 

Pwdump: La chu" vilt tat cCia "Password Dumper". Day la mot cong cu tuyet vol khong thi thilu 
du-gc khi Hack vao he thong WinNT 

MAC: La chu" vilt tat cCia "Media Access Control" 

OSI: La chu" vilt tat cCia "Open System Interconnection", hay con goi la mo hlnh chuan OSI. Vay 
mo hlnh OSI la gl? 

ThLFC ra trong qua khCr, viec truyin thong giCra cac may tinh tCr cac nha cung cap khac nhau rat 
kho khan, boi le chung sCf dung cac giao thCrc va dinh dang du" lieu khac nhau. Do vay To chCrc 
tieu chuan hoa quoc tl (ISO) da phat triln mot kiln true truyin thong du'oc bilt din nhu' la mo 
hlnh Kit noi Ian nhau qua he thong mo - Open System Interconnection (OSI) mot mo hlnh dinh 
nghTa cac tieu chuan lien kit cac may tinh tCr cac nha cung cap khac nhau. 

ACK: La chCr vilt tat cCia "Acknowledgement" 

ATM: La chCr vilt tat cCia "Asynchronous Transfer Mode". Day la mot ky thuat mang dinh hu-ong 
kit noi ma sCf dung nhCrng cell nho c6 kich thu'oc c6 dinh o mCrc thap nhat. ATM c6 u-u dilm vl 
kha nang ho trg dCr lieu thoai va video 

EGP: La chu" vilt tat cCia "Exterior Gateway Protocol". Day la mot thuat ngCr ap dung cho giao 
thCpc nao du'oc sCf dung boi bo dinh tuyin trong mot he ty quan dl thong bao kha nang di din 
mang cho bo dinh tuyIn trong he ty quan khac 

DHCP: La chu" vilt tat cCia "Dynamic Host Configuration Protocol". Day la mot giao thCrc ma may 
SLF dung dl lay du'oc tat ca thong tin cau hlnh can thilt, bao gom ca dia chi IP 

OWA: La chCr vilt tat cCia "Outlook Web Access". Day la Module cCia Microsoft Exchanger Server 
(mot Server phuc vu Mail), no cho phep ngu-oi dung truy cap va quan tri Mailbox cCia ho tCr xa 
thong qua Web Browser 

URL: La chCr vilt tat cCia "Uniform Resource Locator", dung dl chi tai nguyen tren Internet. Slfc 
manh cCia web la kha nang tao ra nhCrng lien kit sieu van ban din cac thong tin lien quan. 
NhCrng thong tin nay c6 thl la nhCrng trang web khac, nhCrng hlnh anh, am thanh... NhCrng lien kit 
nay thu-ong du'oc bilu dien bang nhCrng chu" mau xanh c6 gach du-oi du'oc goi la anchor. Cac 
URL CO thl du'oc truy xuat thong qua mot trlnh duyet (Browser) nhu' IE hay Netscape 

WWW: La chu' vilt tat cCia "World Wide Web" 

HTML: La chCr vilt tat cCia "Hyper Text Markup Language", tCrc la ngon ngCr sieu van ban. Day la 
mot ngon ngCr dung dl tao trang web, chCra cac trang van ban va nhCrng tag (the) dinh dang bao 
cho web browser bilt lam thl nao thong dich va thl hien trang web tren man hlnh. 

Web page la trang van ban tho (text only), nhu'ng vl mat ngCr nghTa gom 2 noi dung: 

- Doan van ban cu thl. 



- Cac tag (trifang van ban dugc viet theo qui djnh) mieu ta mot hanh vi nao do, thipong la mot 
moi lien kit (hyperlink) den trang web khac 

SMB: La chO" viet tat cCia "Server Message Block". Day la mot trong nhCrng protocols pho bien 
cho PC, cho phep ban dung nhCrng share files, disks, directory, printers va trong vai hu-ong ca 
cong COM 

CPU: La chu" viet tat cCia "Central Processing Unit". Day la tap hop nhieu mach dien dung de dieu 
khien moi hoat dong chinh cCia may 

POPS: La chu" viet tat cCia "Post Office Protocol Version 3". POPS daemon thu-ong du'oc chay 6 
cong 1 1 (day la cong chuan cCia no). Dung de check mail, ban phai kit noi din server dang 
chay POPS daemon o cong 1 1 

TFTP: La chu" vilt tat cCia "Trial File Transfer Protocol". TFTP chay tren cong 69 va dung giao 
thLFC UDP nen rat khong an toan 

RIP: La chu" vilt tat cCia "Routing Information Protocol", chay tren cong 512 

HyperTerminal: La chu'ong trlnh cho phep ban mo mot server tren bat ky port nao cCia may tinh , 
va cho phep ling nghe nhCrng thong tin dau vao tCr nhCrng may tinh xac dinh. 

Ban muon thilt lap no hay vao : Start>Programs>Accessories>Communications 
Roi chon HyperTerminal 

DES: La chCr vilt tat cCia "Data Encrypt Standar". Day la mot trong nhCrng chuan ma hoa 
password thong dung, rat kho bi crack, chi c6 mot each duy nhat va cung la di nhat la dung ty 
diln 

WU-FTP: La chCr vilt tat cCia "Washington University - File Transfer Protocol". Day la mot phan 
mim Server phuc vu FTP du'oc dung kha pho biln tren cac het thong Unix & Linux. Chu'ong 
trlnh nay tCrng bi mot loi kha nghiem trong, do la slf thi hanh cCia file globbing tren Server chipa 
tinh di ton thu-ong cho phep cac hacker thi hanh cac code lenh tren server tCr xa (tat nhien la 
code CO hai roi). dan din viec ghi de cac file len serverva cuoi cung dan din crash he thong" 

NIS: La chCr vilt tat cCia "Network Information Server". 

GUI: La chu" vilt tat cCia "Graphic User Interface". Day la giao dien do hoa ngu-oi slf dung trong 
he dilu hanh Linux 

Global: Tien ich dong lenh nay se hiln thi cac thanh vien cCia Global Group tren server hay 

domain du'oc chi dinh. 

Cu phap : C:>global "Domain Users" domaini 

Local: Giong nhu" Global nhu-ng no hiln thi cac thanh vien cCia Local Group. Chang han nhu" ta 
muon truy van danh sach Administrator Group. 
Cu phap : C:>local "administrators" domaini 

SOCKS: SOCKS du'oc tao ra boi chu" SOCKetS va du'oc phan thin chu ylu bol NEC, cung nhu' 
du'oc ITEF du'a thanh mot chuan cCia Internet, dygc dinh nghT trong RFC (Request for comment). 
Nhiem vu cCia SOCKS la cau noi trung gian giCra mot dau cCia SOCKS server din dau kia cCia 
SOCKS server: 

CLIENT > IN - SOCKS SERVER - OUT > SERVER 

SOCK du'gc dung chu ylu trong cong nghe Proxy server va Firewall. Hien nay c6 version 



S0CKS4 va S0CKS5. Socks 5 la ban phat trien sau nen c6 them tinh nang de authorize, va c6 
the SLF dung UDP (SOCKS 4 chi c6 TCP). 

SQL Injection: TCpng la mot kieu tan cong vao trang web pho bien. Bang each chen cac ma SQL 
query/command vao input tru'oc khi chuyen cho LPng dung web xCf Ii, ke tan cong c6 the dang 
nhap ma khong can usemame va password, remote execution, dump data va lay root cCia SQL 
server. Cong cu dung de tan cong la mot trlnh duyet web bat kl, c6 the dung Internet Explorer, 
Netscape, Lynx, ... 

DoS: La chu" viet tat cCia "Denial of Service" (Tan cong tCr choi dich vu). Day la phu-ong phap 
thu-ong du-gc hacker sCf dung de tan cong mot trang web khi cac phu-ong phap tan cong khac to 
ra khong c6 hieu qua. Dae diem cCia DoS la lam hao ton mot so lu-gng tai nguyen tren may chu, 
chiem dung bang thong, bo nho, CPU, dTa cCrng... lam cho may chu khong the dap Crng du-gc cac 
yeu cau gCri toi. Ket qua cuoi cung se lam cho may chu te liet hoac phai khoi dong lai. 

Exploit: Khai thac (mot loi nao do) 

Fake IP: IP gia mao 

Crack Password: Be khoa mat khau 

Debug: La chu-ong trlnh di kem vol DOS. Day la mot cong cu tuyet vol de go roi chu-ong trlnh, 
crack phan mem, doc bo nho bi che giau nhu' boot sector va nhieu hon nCra... De debug du-gc 
chu'ong trlnh, ban can phai c6 kiln thipc ve Assembly. 

TCP Port Scanning: La dang co ban nhat cCia cac chu'ong trlnh Scanner. Loai chu'ong trlnh nay 
se thCp mo mot kit noi TCP din mot Port nao do dl xac dinh trang thai cCia Port nay 

Web spoofing: La mot dang tan cong cho phep mot ngu'di nao do xem va chinh sCra mgi trang 
web gCri din may nan nhan. Ho c6 thi theo doi mgi thong tin do nan nhan diln vao cac form. 
Dilu nay dac biet nguy hilm vol nhCrng thong tin ca nhan nhu' dia chi, so the tin dung, so tai 
khoan ngan hang, mat ma truy cap vao tai khoan do.... Web spoofing hoat dgng tren ca IE Ian 
Netscape. No hoat dgng dya vao viec giao thipc SSL du'gc dung nhu' mot dang giay chCrng nhan 
cho nhCrng Website xac thyc. Viec tan cong theo kilu nay c6 thI du'gc thi hanh bang each dung 
Javascript va Web server plug-ins 

Footprinting: Phu'ong thCrc "In dau chan" la thu thap tat ca nhCrng thong tin quan trgng vl muc 
tieu cCia ban nhu': Email, IP, Domain... Day bu'oc co ban dau tien cCia hacker tru'oc khi hack vao 
mot he thong nao do. 

XSS: La chCr vilt tat cCia "Cross site scripting". Day la thuat ngCr noi din viec website sCf dung 
each nao do dl an cap thong tin eCia ngu'di dung (vi du nhu' cookie chang han). Hacker se du 
nan nhan din trang web eCia mlnh bang each du'a mot sieu lien kit (hyperlink) hap dan. DT nhien 
nhCrng hacker gioi thu'ong ma hoa ca hyperlink cCia mlnh dl giam thilu sy nghi ngo. Sau khi dCr 
lieu cCia nan nhan bi danh cap, no se gCri din cho hacker va du'a ra mot trang web co ngi dung 
phu hgpvoi hyperlink gia 

Race Conditions: Race Conditions (tlnh trang tranh dua) la mgttrong nhCrng cugctan cong pho 
biln tren cac he thong Unix/Linux 

Race Conditions xay ra khi mot chu'ong trlnh hoac quy trlnh xCf ly nao do thyc hien mot sy kilm 
tra. GiCra thoi gian ma mot sy kilm tra du'gc lam va hoat dgng du'gc thyc hien, ket qua cCia cugc 
kilm tra do co thI se phan chilu trang thai cCia he thong. Hacker se Igi dung chu'ong trlnh hoac 
quy trlnh nay trong luc no thyc hien dac quyin 

Buffer Overflow: Loi tran bg dem. Day la mot trong nhCrng ky thuat Hacking kinh diln nhat 



Nuke: La mot trong nhCpng ky thuat kha Igi hai. Neu nhip ban biet 6ueq/c IP cCia mot may tinh bat 
ky dang kit noi thl nuke hoan toan c6 the lam cho may tinh do disconnect, cho du do la cCia ca 
mot mang LAN 

Sniffer: La chu-ong trlnh cho phep ban chop tat ca cac goi du" lieu dang chuyen card mang cCia 
may ban. Cac dCr lieu do c6 the la ten ngu-oi dung, mat khau, mot so thong tin quan trong khac. 



Log: La thao tac ghi nhan lai qua trlnh sCf dung dich vu cCia ban. Khi xam nhap mot may tinh hay 
server thl viec xoa log la khong the thieu. Boi vl, neu khong xoa log thl tCr do ngu-oi ta c6 the tlm 
ra IP that cCia ban 

Trojan: La mot chu-ong trlnh bat hop phap du-gc chCra ben trong mot chu-ong trlnh hop phap. 
Chu-ong trlnh khong hop phap nay thyc hien nhCrng ham bi mat ma ngu-oi dung khong biet hay 
khong can den. Trojan c6 nhieu loai nhu-ng van chCi yeu la 2 loai chinh : 

+ Trojan lay password roi gCri password lay du-gc qua email (vd : Kuang2, Hooker, barok...) 

+ Trojan dung de dieu khien tCr xa (vd : Sub Seven 7, Back Orifice 2000...) 

Port surfing: La kit noi din cac cong cCia mot may chCi dl thu thap cac thong tin, chang han nhu' 
thoi gian, he dilu hanh, cac dich vu dang chay,... 

Finger: La mot chu'ong trlnh rat hOu ich, giup ban thu thap rat nhilu thong tin vl users (thu-ong bi 
disable) 

Nmap: La chCr vilt tat cCia "Network exploration tool and security scanner" . Day la chu'ong trlnh 
quet hang dau vol toe do eye nhanh va eye manh. No eo thl quet tren mang dien rgng va dac 
biet tot doi vol mang don le. NMAP giup ban xem nhCrng dich vu nao dang chay tren server 
(serviees/ports:webserver,ftpserver,pop3,...), server dang dung he dilu hanh gl, loai tu-ong lira 
ma server sCf dung, ... va rat nhilu tinh nang khac. Noi ehung NMAP ho trg hau hit cac ky thuat 
quet nhu' : ICMP (ping aweep), IP protocol. Null scan, TCP SYN (half open), ... NMAP du-gc danh 
gia la cong cu hang dau cCia cac Hacker cung nhu" cac nha quan tri mang tren thl gioi. 

Netcat: La mot cong cu khong thl thilu doi vol hacker khi muon tan cong vao cac website, 
server. Chu'ong trlnh nay doc va ghi du" lieu qua mang thong qua giao thCrc TCP hoac UDP. Ke 
tan cong c6 thl dung Netcat mot each trye tilp hoac sCf dung chu'ong trlnh, script khac dl dilu 
khiln Netcat. Netcat du-gc coi nhu" mot exploitation tool do no c6 thl tao du-gc lien kit giOa ke 
tan cong va server cho viec doc va ghi du" lieu. 

Get Admin: La "Leo thang dac quyin" hay con ggi la "Leo thang mCrc u-u tien". Day du'gc coi la 
mot trong nhCrng bu-oc quan trong khi hacker dot nhap vao cac he thong. Gia sCf hacker chilm 
du'gc quyIn va dang nhap vao he thong Win NT. Nhu-ng user hacker lay du'gc khong c6 quyIn 
tu-ong du'ong nhu" nhom Administrators ma thugc nhom c6 quyIn thap hon. Nhu" vay hacker 
khong c6 quyIn lam nhilu thao tac nhu" Admin. Do vay, hacker phai thyc hien bien phap "Get 
Admin" dl doat quyIn cao hon nham kilm scat he thong. 

Netwatch: La cong cu hiln thi cactai nguyen dung chung tren he thong mang ma ban muon hack 

Usestat: Tien ich dong lenh nay c6 thl hiln thi User, Full name, ngay thang va thoi gian dang 
nhap cho moi ngu-oi dung tren moi doamin da chi dinh. 

FootPrinting: La each ma hacker lam khi muon lay mot lu'gng thong tin toi da vl may chu/doanh 
nghiep/ngu-oi dung. No bao gom chi tilt vl dia chi IP, Whois, DNS ..v.v dai khai la nhCrng thong 
tin chinh thipc c6 lien quan din muc tieu. Nhilu khi don gian hacker chi can sCf dung cac cong cu 



tlm kiem tren mang de tlm nhCnng thong tin do 

Enumeration: La tlm l<iem nJiCnng tai nguyen dipgc bao ve l<em, iioacii tai l<lioan ngipoi dung ma 
CO till SLF dung de xam niiap. No bao gom cac mat l<liau mac dinii, cac script va dicii vu mac 
dinii. Rat niiieu ngu'di quan tri mang I<li6ng biet den iioac I<li6ng sCra doi lai cac gia tri nay 

Gaining Access: La dira vao nJiCrng tiiong tin da nam du'oc a bueac Enumeration ma liacl<ertan 
cong vao loi tran bo dem, lay va gia ma file password, hay tho thien nhat la brute force (kiem tra 
tat ca cac tru'ong hop) password. Cac tool thu-ong du-gc sCf dung o bu'oc nay la NAT, podium, 
hoac Lopht 

Escalating Privileges: La hacker tlm each kiem scat toan bo he thong. Hacker se tlm each crack 
password cCia admin, hoac sCf dung lo hong de leo thang dac quyen trong tru'ong hop ho xam 
nhap dygc vao mang vol tai khoan Guest. "The John and Riper" la hai chu-ong trlnh crack 
password rat hay du-gc sCf dung 

Pilfering: La hacker sCf dung cac may tlm kiem lai dyoc sCf dung de tlm cac phu'ong phap truy 
cap vao mang. NhCrng file text chipa password hay cac co che khong an toan khac c6 the la moi 
ngon cho hacker. 

Covering Tracks: Sau khi da c6 nhCrng thong tin can thiet, hacker tlm each xoa dau vet, xoa cac 
file log cCia he dieu hanh lam cho ngu'di quan ly khong nhan ra he thong da bi xam nhap hoac c6 
biet cung khong tlm ra ke xam nhap la ai 

PKC: La chu' viet tat cua "Public key cryptos". Co nghTa la he thong mat ma sCf dung tCr khoa 
Chung 

PHP: La chCr viet tat cua "PHP Hypertext Preprocessor", tam dich la ngon ngCr tien xlf If cac sieu 
van ban. Cac ma lenh PHP du'gc nhung vao cac trang web, cac trang nay thu'ong c6 phan mo 
rgng la .php, .php3, .php4. Khi client goi yeu cau "can tai cac trang nay ve" den web server, dau 
tien web server se phan tich va thi hanh cac ma lenh PHP du'gc nhung trong, sau do tra ve mot 
trang web kit qua da du'gc xlf Ii cho client. PHP la mot ngon ngCr rat de dung, de hoc va eye kl 
don gian hon nhieu so vol cac ngon ngCr khac nhu' C, Perl. PHP hien nay rat pho bien tuy nhien 
PHP scripts Chang an toan chut nao, cac Hacker c6 the Igi dung khe ho nay de attack cac 
servers 

PUB: Mot PUB thong thu'ong c6 chipa cac file de cho mgi ngu'di dowload, mot so PUB c6 the cho 
upload. Tuy nhien, mot PUB c6 the khong chi chCra cac file dung cho viec download, ma c6 the 
chLPa ca mot "TRANG WEB". 

Local Exploit: La khai thac cue bg. Day la mot trong nhCrng phu'ong phap tan cong cao cap cua 
hacker (ST) 
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